This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F838EDC2BBC011F09012C682DAE4EC9C.roa
File:                     F838EDC2BBC011F09012C682DAE4EC9C.roa (raw, json)
Hash identifier:          z6Q/xsuyXT4O/k1rcMW9KMvhfEIz/s5xMCc5OyJYikM=
Subject key identifier:   DE:3E:88:66:EE:AA:1D:4A:DB:7D:FE:6C:C4:B0:7C:B7:92:D4:80:F7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A7DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F838EDC2BBC011F09012C682DAE4EC9C.roa
Signing time:             Fri 07 Nov 2025 10:03:12 +0000
ROA not before:           Fri 07 Nov 2025 10:03:05 +0000
ROA not after:            Sat 27 Dec 2025 10:03:05 +0000
asID:                     137899
IP address blocks:        154.219.96.0/19 maxlen: 24
                          154.222.16.0/20 maxlen: 24
                          154.222.16.0/21 maxlen: 24
                          154.222.16.0/22 maxlen: 24
                          154.222.20.0/22 maxlen: 24
                          154.222.24.0/21 maxlen: 24
                          154.222.24.0/22 maxlen: 24
                          154.222.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108507 (0x1a7db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  7 10:03:05 2025 GMT
            Not After : Dec 27 10:03:05 2025 GMT
        Subject: CN=690dc3e0-870b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:1e:8e:17:88:ce:59:21:18:19:26:8f:d3:
                    08:36:15:0e:64:af:53:04:89:62:e2:1e:6c:e1:1f:
                    68:a5:29:a6:ff:27:44:5a:23:84:b1:8b:b2:df:9f:
                    49:56:5a:1f:f1:46:3b:74:25:a1:18:8c:bd:67:ce:
                    8e:d3:9c:c4:88:f7:8b:f0:50:1c:91:c9:84:86:1b:
                    ce:c4:11:44:a9:c2:ce:d0:c6:46:2e:2c:e7:e8:9d:
                    e9:ff:e7:9c:f0:b8:bd:ba:de:1d:e2:c8:9e:3d:b2:
                    20:28:10:88:be:20:a7:45:12:e7:df:c1:89:81:cd:
                    05:7e:dd:cf:58:bd:4c:b5:cc:99:b5:a5:09:21:b6:
                    1a:32:dd:b7:b7:56:fb:53:20:f4:1c:d0:e5:d5:ee:
                    b3:36:d3:30:57:55:7f:09:5a:8a:d3:64:1b:69:88:
                    82:89:4c:59:37:3b:7c:b6:04:f8:65:c4:7c:41:7e:
                    d1:91:31:dd:75:6f:eb:3d:16:fe:77:4f:e8:0e:af:
                    ad:68:4b:ee:eb:78:b2:54:fe:f4:f6:42:d2:e4:7a:
                    65:7c:f5:75:5e:25:d6:15:c2:42:1f:67:9b:be:af:
                    4d:e1:39:3b:6d:d2:1c:16:d0:ae:ce:24:f2:c9:50:
                    0d:4e:39:31:9a:71:66:8e:87:6a:6e:62:af:9a:61:
                    c0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3E:88:66:EE:AA:1D:4A:DB:7D:FE:6C:C4:B0:7C:B7:92:D4:80:F7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F838EDC2BBC011F09012C682DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.96.0/19
                  154.222.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:c3:ee:7c:68:96:9f:f6:21:90:62:62:93:1d:1a:2e:e3:23:
         a3:66:00:01:b2:6d:f8:7c:1a:cb:e3:c6:4c:f6:f9:bf:de:db:
         40:8a:eb:3b:ff:38:09:b0:87:74:9c:12:10:a3:fe:fc:e4:eb:
         10:8e:fa:c5:b8:17:2d:2b:59:af:50:de:b7:37:fa:9d:34:87:
         e6:b0:8b:d0:ad:f1:d4:a5:f2:ad:c9:61:74:14:50:38:8e:f8:
         89:a7:8b:6c:c2:00:fd:be:c6:2b:ab:5e:d8:cd:da:2e:e6:12:
         da:73:59:03:ac:50:92:50:60:e9:f4:58:7d:24:64:cd:62:80:
         11:5d:b2:c0:7b:78:37:53:35:72:61:1d:13:c1:a6:56:df:8b:
         84:f0:7b:2c:7a:ee:5c:3e:9a:02:05:66:fd:55:52:b5:82:bf:
         f9:3b:3a:f5:6c:50:94:44:79:7e:df:ff:40:37:d3:68:fd:58:
         af:57:b4:0d:94:05:83:af:9f:8a:cd:f4:38:1e:59:d6:81:a7:
         aa:03:9e:94:14:bb:d9:28:39:b6:1c:9f:cd:6f:52:2f:a6:84:
         fe:fd:f6:5c:0c:2f:7d:bd:72:4e:98:39:b9:39:1f:65:27:14:
         5a:3a:37:fd:4e:bf:37:22:d3:89:e3:be:07:d0:11:7c:d0:56:
         3b:82:7c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:19 2025 by rpki-client